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DETAILED ACTION 



This office action is in response to amendment and remarks filed on May 17, 2007. 
Original application contained Claims 1-11. Applicant previously amended Claims 1, 7, 9, 11, 
and added new Claim 12-14, Applicant currently amended Claim 1, and 11, and cancelled 
Claims 10, and 13-14. The amendment filed on May 17, 2007 have been entered and made of 
record. Therefore, Claims 1-9, and 11-12 are pending for consideration. 



Response to Arguments 
Applicant's arguments filed on May 17, 2007 have been fully considered but they are not 
persuasive because of the following reasons: 

Regarding Claims 1-9, and 11-12 applicants argued that in cited prior art [Benson et al. 
(U. S. Patent 6,651,169)] " shows that the program release is enabled and does not show that a 
set of programs is delivered one on one physical storage from the manufacturer to the customer, 
or user. Further, the claimed invention includes a dongle that includes a plugging connector and 
further claims that the dongle is plugged into an interface". 

This is not found persuasive. Cited prior art clearly teaches system and method for 
communicating from a software producer to the user an encrypted product identification that 
references at least one of said user programs download by using smart card , where the smart 
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card is a device with no interface for releasing private keying material in a non- 
cryptographically protected form. This smart card is used to store and access the customer's 
private keying material (or the vendor's private keying material used in keyfile generation). 
In the system of cited prior art computer system employ challenge mechanism for software 
protection and depends upon shared secret information generated by challenge mechanism, and 
protection server having sole access to private keying material. The system guarantees, by means 
of an asymmetric confidentiality protocol that the software cannot be used unless registered by a 
vendor. The challenge mechanism is embedded inseparably in the protected stored software, and 
incorporates the vendor's public keying material. The customer sends to the vendor a registration 
package containing reference to a public directory where the customer's public keying material is 
held. The vendor embeds this material into a keyfile returned to the customer, who executes a 
protection server program requiring a password (Fig- 1-3, col. 3 line 65 to col. 5. line 10, col. 7 
line 28 to col. 11 line 14). 

As a result, the system of cited prior art provides a system and method for operating a 
data processing system with copy protection for user programs, as claimed in claims 1-9, and 1 1- 
12. 

Applicants still have failed to explicitly identify specific claim limitations, which would 
define a patentable distinction over prior art. Therefore, the examiner asserts that cited prior art 
does teach or suggest the subject matter broadly recited in independent and dependent claims. 
Accordingly, rejections for Claims 1-9, and 1 1-12 are respectfully maintained. 
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Claim Rejections - 35 USC § 102 

(e) the invention was described in (1) an application for patent, published under section 122(b), by another filed 
in the United States before the invention by the applicant for patent or (2) a patent granted on an application for 
patent by another filed in the United States before the invention by the applicant for patent, except that an 
international application filed under the treaty defined in section 351(a) shall have the effects for purposes of this 
subsection of an application filed in the United States only if the international application designated the United 
States and was published under Article 21(2) of such treaty in the English language. 



Claims 1-9, and 1 1-12 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Benson et al. (U. S. Patent 6,651,169). 

1 . Regarding Claim 1 Benson teach and describe a method for operating a data processing 
system with copy protection for user programs (Fig. 1-3), comprising the steps of: 

providing the data processing system with a copy protection identification by a hardware 
module, said hardware module including a dongle having a plugging connector for selective 
connection to an interface of the data processing system (col. 5 line 46 to line 55, and col. 10 line 
31 to line 45), 

providing a storage medium containing a plurality of application programs as a set of 
programs as well as an installation program and a cryptoprogram a user (col. 5 line 46 to line 58, 
and col.7 line 1 to line 20), 

communicating from a producer to the user an encrypted product identification that 
references at least one of said user programs, communicating a user identification that identifies 
the user, and a copy protection identification to the user, the communicated copy protection 
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identification corresponding to the copy protection identification connected via the hardware 
module (col. 6 line 4 to line 45, col. 10 line 31 to line 45); 

plugging the dongle into the interface of the data processing system (col. 10 line 31 to line 

45); 

when processing the installation program on the data processing system, inputting the 
communicated copy protection identification from the dongle, the user identification and the 
encrypted product identification communicated from the producer, providing each of said user 
program with a predetermined memory area into which the copy protection identification can be 
entered (col. 3 line 65 to col. 5 line 10, and col. 10 line 31 to line 45), 

comparing by the installation program the copy protection identification that has been 
input to the copy protection identification connected via the hardware module and, given 
coincidence, deciphering the encrypted product identification upon utilization of the user 
identification as a key, and identifying one of said user programs referenced in the product 
identification, said identified one of said user programs being selected user program, loading the 
selected user program from the storage medium into a memory area of the data processing 
system, entering by the cryptoprogram the copy protection identification into a predetermined 
memory area of the selected user program, and before running the selected user program, 
comparing the copy protection identification contained in the predetermined memory area to the 
copy protection identification directly connected with the data processing system via the 
hardware module, running the selected user program only given coincidence (Fig.3, col. 7 line 28 
to col. 8 line 34, and col. 10 line 15 to col. 1 1 line 14), 
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releasing a further one of said application programs on said storage medium to said user 
using a same said user identification (col. 3 line 65 to col. 5 line 10) and said selected user 
program and said further ones of said plurality of application programs are released to the user 
program-by-program (col. 7 line 10 to line 35). 



2. Claims 2-9, and 11-12 are rejected applied as above in rejecting Claim 1 . Furthermore, 
the system of Benson teaches and describes a system analyzing network intrusion, further 

As per Claim 2, when running the installation program, further running of the installation 
program is only continued after the comparison of the copy protection identification that has 
been input to the copy protection identification connected with the data processing system given 
coincidence (col. 6 line 18 to line 67). 

As per Claim 3 the product identification also contains the copy protection identification, 
and further comprising the step of: comparing said copy protection identification to the copy 
protection identification connected with the data processing system, and continuing running of 
the further program steps only given coincidence (col.6 line 1 8 to line 67,and col.7 line 30 to 
col.8 line 34). 

As per Claim 4 referencing a plurality of application programs in said product 
identification; determining a list of said application programs upon decipherment of the product 
identification; and checking said list for correctness (col.7 line 10 to line 25). 

As per Claim 5 said step of checking said list for correctness ensues on a basis of a 
checksum check (col.7 line 10 to line 25). 
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As per Claim 6 accepting a user selection from the application programs of the list; and 
loading only the selected application programs from the storage medium into the memory area of 
the data processing system (col. 7 line 10 to line 25). 

As per Claim 7 undertaking an authentification between the installation program and a 
key program when the key program is called (col. 3 line 65 to col.4 line 17). 

As per Claim 8 said authentification is implemented according to a challenge-response 
protocol (col. 7 line 55 to col. 8 line 30). 

As per Claim 9, wherein the product identification is compressed according to a static 
Huffman-Baum method (col. 2 line 20 to line 37). 

As per Claim 1 1 , wherein the plugging connector the dongle is at least one of a parallel 
interface and a serial interface and a USB interface; and said dongle including the copy 
protection identification (Fig. 1-2, col. 10 line 31 to line 45). 

As per Claim 12, wherein said step of comparing by the installation program the copy 
protection identification connected via the hardware module to the communicated copy 
protection identification requires no decryption (col. 10 line 15 to col. 1 1 line 14). 
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Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Syed Zia whose telephone number is 571-272-3798. The 
examiner can normally be reached on 9:00 to 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

sz 

July 19, 2007 




